Scripting Question

Need to change permissions on folders and files using K1000

06/03/2014 3767 views

I need to change permissions on a number of computers.  When I do it via GPO I cannot break it down to just the machines that need it as all PC's sit in the Misc Computers group.  Only a certain subset of PC's need these file permission modifications.  What's the best way to do this with the K1 as GPO isn't cutting it for me.  Permissions are not applying via GPO for some reason on some PC's but are on others even though they are all in the same group.  

Any help would be greatly appreciated.

Answer Summary:
Per SMal.tmcc's recommendation I created a batch file using icacls to set the permissions. I first had a verify to see if the file was there then on success run the batch file. Worked like a charm once I figured out the correct folder versus file flags.
0 Comments   [ + ] Show comments


All Answers


you may have to force a gpupdate or reboot a couple of times to get the full effect of a gpo.  Typically one boot changes the settings and the next boot carries them out.

you can create a script and use cacls or icacls to set permissions


Answered 06/03/2014 by: SMal.tmcc
Red Belt

  • Yeah this has been sitting for over a week and it's not updating after numerous reboots. the domain is running fine and the GPO is listed in the gpresults but it's not applying.

    I tried using icacls and it says it applies but it doesn't. I need it to apply domain security group permissions to folders and files and it's just not working either.
    • who is the owner of these folders?
      • I did a little more digging. I needed to change the flags on icacls for each file/folder. I had them backwards. Thanks for your help!
      • cool
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ